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Amendments to the Specification: 

Please replace paragraph [01], [11], and [12] with the following paragraphs: 
[01] This application claims priority from U.S. Provisional Application No. 60/243,925, 
entitled "SYSTEM FOR CONTENT DELIVERY OVER A COMPUTER NETWORK," filed on 
October 26, 2000 and U.S. Provisional Application 60/263,087, entitled "SYSTEM FOR 
SECURELY DELIVERING ENCRYPTED CONTENT ON DEMAND WITH ACCESS 
CONTROL," filed January 18, 2001. These applications are incorporated herein by reference for 
all purposes. This application is also related to the following U.S. Non provisional applications, 
U.S. Patent Application No. 08/420,710, now U.S. Patent No 5,627,892, entitled "DATA 
SECURITY SCHEME FOR POINT-TO-POINT COMMUNICATION SESSIONS," filed April 
19, 1995; U.S. Patent Application No. 09/898,136 U.S. Patent Application No. 
entitled "SYSTEM FOR DENYING ACCESS TO CONTENT GENERATED BY A 
COMPROMISED OFF LINE ENCRYPTION DEVICE AND FOR CONVEYING 
CRYPTOGRAPHIC KEYS FROM MULTIPLE CONDITIONAL ACCESS SYSTEMS," filed 
July 3, 2001 ; U.S. Application No. , e ntitled "SYSTEM FOR SECURING 

ENCRYPTION RENEWAL DEVICE AND FOR REGISTRATION AND REMOTE 
ACTIVATION OF ENCRYPTION DEVICE," filod July 3, 2001; U.S. Patent Application No. 

, entitled "SYSTEM FOR DENYING ACCESS TO CONTENT GENERATED 
BY A COMPROMISED OFF LINE ENCRYPTION DEVICE AND FOR CONVEYING 
CRYPTOGRAPHIC KEYS FROM MULTIPLE CO>JDITIONAL ACCESS SYSTEMS," filed 
July 3. 2001 : U.S. Patent Application No. 09/898.184 U.S. Patent Application No. 

. , entitled "SYSTEM FOR SECURELY DELIVERING PRE-ENCRYPTED 
CONTENT ON DEMAND WITH ACCESS CONTROL," filed July 3, 2001, all of which are 
hereby incorporated by reference in their entirety as if set forth in full in the present invention, 
for all purposes. 

[11] One solution to the aforementioned problem is disclosed in co-pending related 
application entitled SYSTEM FOR SECURELY DELIVERING PRE-ENCRYPTED 
CONTENT ON DEMAND WITH ACCESS CONTROL, U.S. Serial No. 09/898.184 U.S. S e rial 
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No. filed , July 3, 200 1, which is hereby incorporated by reference in its entirety. In 

U.S. Serial No. U.S. Serial No. 09/898,184 , a system is disclosed that encrypts content 

offline (typically before the content is requested by the user) before it is distributed to point-to- 
point systems such as cable systems. The system allows content to be encrypted once, at a 
centralized facility, and to be useable at different point-to-point systems. Advantageously, the 
pre-encrypted contents in the present invention have indefinite lifetimes. The system 
periodically performs an operation called ECM retrofitting, enabling the content to be useable in 
multiple systems and useable multiple times in the same system. The amount of data being 
processed during ECM retrofitting is very small (on the order of several thousand bytes). There 
is no need to reprocess the pre-encrypted contents. This is a significant advantage, as several 
thousand bytes represent only a tiny fraction of the size of a typical 2-hour video program, which 
can be about 3 gigabytes (3,000,000,000 bytes) in size. 

[12] In a first embodiment, the system of U.S. Serial No. U.S. Serial No. 09/898 J 84 , 
includes a content preparation system (CPS) containing an off-line encryption system (OLES) 
for pre-encrypting the content offline to form pre-encrypted content; an encryption renewal 
system (ERS) for generating entitlement control messages (ECMs) that allow the pre-encrypted 
content to be decrypt-able for a designated duration; and a conditional access system (CAS) for 
granting conditional access to receiving units. The ERS, in a first aspect, is connected to the 
public Internet and is readily accessible to the world wide web, which makes the ERS susceptible 
to access by unauthorized parties. Since the ERS handles highly sensitive information, it must 
be protected and secured from unauthorized access. 
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